xwt815 - 2008-7-17 14:47:00
智能扫描结果(附件)帮我看下`谢谢哦用户系统信息:Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; QQDownload 1.7)附件:
SREngLogEm.LOG
开心101 - 2008-7-17 15:08:00
C:\WINDOWS\system32\xcvaver0.dll
%systemroot%\system32\shmgrate.exe
用xdelbox把这两个删掉
xwt815 - 2008-7-17 15:30:00
xdelbox是什么```在哪下载
开心101 - 2008-7-17 15:59:00
原帖由 xwt815 于 2008-7-17 15:30:00 发表
xdelbox是什么```在哪下载
把下面的附件扩展名.txt去掉
附件:
XDelBox.exe.txt
xwt815 - 2008-7-17 16:04:00
xiexie
为什么是马甲 - 2008-7-17 16:17:00
启动项目--注册表--删除
<{C3D16072-2E1B-450B-B843-50EADDC8EB63}><C:\WINDOWS\system32\xcvaver0.dll>
清空 <AppInit_DLLs><msosdohs00.dll,msoscqet00.dll,msosfasq00.dll,msosmhap00.dll,nicozftp00.dll,msosmnsf00.dll,msosdrop00.dll,bmuqbo.dll,ytewcxzsw.dll,gsshwj.dll,exohsg.dll,xahoxi.dll,asiakw.dll,ieprot.dll> [N/A]
的值
==================================
删除驱动程序
[drop / drop][Stopped/Auto Start]
<\??\C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\tmpD.tmp><N/A>
[fasq / fasq][Stopped/Auto Start]
<\??\C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\tmp8.tmp><N/A>
[mnsf / mnsf][Stopped/Auto Start]
<\??\C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\tmpA.tmp><N/A>
[msfpfis64 / msfpfis64][Running/Auto Start]
<\??\C:\WINDOWS\system32\drivers\msosmsfpfis64.sys><N/A>
[zftp / zftp][Stopped/Auto Start]
<\??\C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\tmp3.tmp><N/A>
==================================
删除对应的文件
© 2000 - 2026 Rising Corp. Ltd.